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AMENDMENTS TO THE CLAIMS 
Please amend Claims 1, 2, 13 5 14, 25, and 26 as follows: 



1 1 . (currently amended) A method of securely invoking an access control function, 

2 the method comprising the steps of: 

3 receiving a digital signature for the access control function; 

4 generating a mapping of the access control function to the digital signature; 

5 determining that the digital signature is mapped to the access control function 

6 based on the mapping when execution of the access control function is 

7 requested; 

8 determining whether an executable element matches the access control function 

9 based on the aigital signature; m& 

10 executing the executable element only when the executable element matches the 

1 1 access control \function[[.]] ; and 

12 wherein a particular class defines an implementation of the access control 

13 function. 

1 2 . (currently amended) The method of Claim 1 , 

2 wh e r e in a particular class^ defin e s an impl e m e ntation for the acc e ss control 

3 function; 

4 wherein the step of receiving a digital signature includes the step of receiving a 

5 digital signature forlthe particular class; and 

6 wherein the step of generating a mapping includes generating a mapping between 

7 the particular class arid the digital signature. 
1 3. (original) The method of Claim 1, 
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2 wherein the method further includes the step of detecting that an access control 

3 event has occurred; and 

4 wherein the step of retrieving the executable element is performed in response to 

5 detecting that the event has occurred. 

1 4. (original) The method of Claim 3, 

2 wherein the metnod further includes the steps of: 

3 generating a mapping between the access control event and the access 

4 control function; 

5 determinira* that the access control event is mapped to the access control 

6 function; and 

7 wherein the step of retrieving the executable element is performed in response to 

8 determining ffliat the access control event is mapped to the access control 

9 function. \ 

1 5. (original) The method of Claim 4, further including the step of the executable 

2 element returning name- value pairs. 

1 6. (original) The metnod of Claim 5, wherein the step of the executable element 

2 returning name-value pairs includes the executable element returning a hash table 

3 that contains the name-value pairs. 

1 7. (original) The method of Claim 1, wherein the method further includes the 

2 steps of: 1 

3 generating a mapping of a plurality of access control functions to digital 

4 signatures, wherein me plurality of access control functions include the 

5 access control function, wherein one or more classes define an 

6 implementation for each of the plurality of access control functions; and 
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11. 



12. 



13. 



wherein each of ti 
(original) Th<; 
routine defined by 
particular class, 
(original) Th< 
executable elemen 



one or more classes belong to a superclass, 
method of Claim 7, further including the step of invoking a 
a superclass that collects data to return to a caller of the 

method of Claim 8, wherein the step of executing the 
includes invoking a routine defined for the superclass. 



executable element 
(original) The 



1 0. (original) The method of Claim 1 , wherein the step of retrieving an 



includes retrieving byte code. 

nethod of Claim 10, wherein the step of retrieving byte code 
includes retrieving Java byte code. 

(original) The method of Claim 1, wherein the step of retrieving an 
executable element includes a first computer system retrieving byte code 
transmitted via a local area network from a second computer system, 
(currently amended) A computer-readable medium carrying one or more 
sequences of one or more instructions for securely invoking an access control 
function, the one or more sequences of one or more instructions including 
instructions which, when executed by one or more processors, cause the one or 
more processors to perform the steps of: 
receiving a digital signature for the access control function; 
generating a mapping of tie access control function to the digital signature; 
determining that the digital signature is mapped to the access control function 

based on the mapping when execution of the access control function is 

requested; 
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er an executable element matches the access control function 
the digital signature; and 
ex scutable element only when the executable element matches the 
access c< ntrol function[[.]] ; and 
wherein a partic alar class defines an implementation of the access control 



determining whe 
based on 
executing the 



function 



(currently amended) The computer-readable medium of Claim 13, 
wh e r e in a particular class d e fin e s an impl e m e ntation for th e acc e ss control 



function 



wherein the step of receiving a digital signature includes the step of receiving a 

digital signature for the particular class; and 
wherein the step < )f generating a mapping includes generating a mapping between 

the particular class and the digital signature, 
(original) The computer-readable medium of Claim 13, 
wherein the computer-readable medium further includes sequences of instructions 

for performing the step of detecting that an access control event has 

occurred; and 

wherein the step ofiretrieving the executable element is performed in response to 

detecting that the event has occurred, 
(original) The computer-readable medium of Claim 15, 
wherein the computer-readable medium further includes sequences of instructions 

for performing the steps of: 

generating a napping between the access control event and the access 
control function; 
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determining that the access control event is mapped to the access control 
function; and 

wherein the step of retrieving the executable element is performed in response to 
determining that the access control event is mapped to the access control 
function. 

(original) Thk computer-readable medium of Claim 16, further including 
sequences of instructions for performing the step of the executable element 
returning name-value pairs, 
(original) Thelcomputer-readable medium of Claim 17, wherein the step of 
the executable element returning name-value pairs includes the executable 
element returning a hash table that contains the name-value pairs, 
(original) The computer-readable medium of Claim 13, wherein the 
computer-readable medium further includes sequences of instructions for 
of: 

of a plurality of access control functions to digital 
srein the plurality of access control functions include the 
function, wherein one or more classes define an 
implementation for each of the plurality of access control functions; and 
wherein each of the one or more classes belong to a superclass. 

uter-readable medium of Claim 19, further including 
sequences of instructions for performing the step of invoking a routine defined by 
a superclass that collects data to return to a caller of the particular class. 



performing the steps 
generating a mapping 
signatures, wh 
access control 



(original) The co: 



Dmp 
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(original) The computer-readable medium of Claim 20, wherein the step of 
executing the executable element includes invoking a routine defined for the 
superclass. 

(original) The computer-readable medium of Claim 13, wherein the step of 
retrieving an executable element includes retrieving byte code. 



(original) The 



computer-readable medium of Claim 22, wherein the step of 



retrieving byte code includes retrieving Java byte code, 
(original) The bomputer-readable medium of Claim 13, wherein the step of 
retrieving an execul able element includes a first computer system retrieving byte 
code transmitted viz a local area network from a second computer system, 
(currently amended) An access control system, comprising: 
a processor; 

a memory coupled tc the processor; 

a first mapping that r laps each of a set of access control functions to a digital 

signature of that access control function; 
the processor configured to retrieve an executable element in response to a 

request to execute a first access control function; 
the processor configured to determine whether the executable element matches 

the first access control function based on the digital signature; mi 
the processor configured to execute the executable element when the executable 

element matches the first access control fiinction[[.]] ; and 
wherein the set of access control functions are each implemented in a class. 



(currently amended) 
wh e r e in th e s e t of 



The access control system of Claim 25, 
acp e ss control functions are oaoh implem e nt e d in a class; and 



wherein the first mapping maps a class implementing one of the set of access 

control functions to a digital signature, 
(original) The access control system of Claim 25, further comprising: 
the processor co ifigured to detect that an access control event has occurred; and 
the processor configured to retrieve the executable element in response to 

detecting that the event has occurred, 
(original) T le access control system of Claim 27, further comprising: 



the processor co: 



nfigured to generate a mapping between the access control event 
and the ac cess control function; 
the processor configured to determine that the access control event is mapped to 

the access (control function; and 
the processor configured to retrieve the executable element in response to 

determining that the access control event is mapped to the access control 
function. I 

(original) The access control system of Claim 28, wherein the executable 
element returns name-value pairs. 

(original) The access control system of Claim 29, wherein the executable 
element returns a hash table that contains the name-value pairs, 
(original) The access control system of Claim 25, 



wherein the processor 



is configured to generate a mapping of a plurality of access 



control functions to digital signatures; 



wherein the plurality of 



function, wherein one or more classes define an implementation for each 



of the plurality 



of access control functions; and 



access control functions include the access control 
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wherein each of the one or more classes belong to a superclass. 



(original) 



the superclass, 
(original) 
element is byte b 



he access control system of Claim 31, further comprising said 



processor confij^ired to invoke a routine defined by a superclass that collects data 
to return to a ca ler of the particular class, 
(original) The access control system of Claim 32, wherein said processor is 
configured to ea ecute the executable element by invoking a routine defined for 



he access control system of Claim 33, wherein said executable 
ode. 



(original) The access control system of Claim 34, wherein said byte code 
includes Java b> te code, 
(original) The access control system of Claim 35, wherein said processor is 
configure to retrieve an executable element by retrieving byte code transmitted 
via a local area r etwork. 
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